Jenkins Amazon EC2 Plugin leaked beginning of private key in system log

MEDIO 5.5CVE-2019-10364 · GHSA-w7fv-7j46-wwrv · Published 31/07/2019 · updated 17/06/2026

En resumen

CVE-2019-10364 es una vulnerabilidad MEDIO (CVSS 5.5) que afecta a org.jenkins-ci.plugins:ec2, ec2 (jenkins).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.34%, mayor que el 27.2% de las vulnerabilidades.
Solución: actualizar a 1.44 o posterior.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:ec2 Maven	`< 1.44`	`1.44`
ec2 jenkins	`≤ 1.43`	No fix yet

Jenkins Amazon EC2 Plugin printed a log message that contained the beginning of the private key to the Jenkins system log.

The log message no longer includes the beginning of the private key.

NVD description

Jenkins Amazon EC2 Plugin 1.43 and earlier wrote the beginning of private keys to the Jenkins system log.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

< 1.44

1.44

≤ 1.43

No fix yet

Description

Jenkins Amazon EC2 Plugin printed a log message that contained the beginning of the private key to the Jenkins system log.

The log message no longer includes the beginning of the private key.

NVD description

Jenkins Amazon EC2 Plugin 1.43 and earlier wrote the beginning of private keys to the Jenkins system log.

Más vulnerabilidades de org.jenkins-ci.plugins:ec2

Ver todo →